Problem with Content Inspection

Hi there,

for evaluation purposes, I've activated the Anti Virus
Function on my 
gateway, to have Content Inspection fpr ftp, http, pop3 and
smtp.
I changed nothing, so all values have their default value,
but I updated 
the Signatures.
My Problem: with Content Inspection activated for smtp and
ftp, these 
services aren't working anymore.
telnet mymailserver 25 results in a connection refused,
shame thing on 
establishing an ftp connection.
Do I have to change something in my policy, or somewhere
else? Please help.
-- 
http://schmidt.bs-server
.com

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi, what is your Firewall version ?

did you upgrade this firewall from an early version ?

Saludos,

Alvaro Gastambide Lusiardo
Check Point Certified Security Administrator - MCSA
Dpto. de Ingeniería
Security Advisor
www.sadvisor.com



Markus Schmidt wrote:

> Hi there,
>
> for evaluation purposes, I've activated the Anti Virus
Function on my 
> gateway, to have Content Inspection fpr ftp, http, pop3
and smtp.
> I changed nothing, so all values have their default
value, but I 
> updated the Signatures.
> My Problem: with Content Inspection activated for smtp
and ftp, these 
> services aren't working anymore.
> telnet mymailserver 25 results in a connection refused,
shame thing on 
> establishing an ftp connection.
> Do I have to change something in my policy, or
somewhere else? Please 
> help.


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.0.0 (Build 2001)

iQCVAwUBRWsHVJ6OVk3MzmvhAQjUSAP+Mx7/vUpg7gcgFr6xrOkyNpHjLVeN
GH6x
aWKlu/YRWpdBDfIFgT9sZ93r9rYJdPSJKrYbPOelwn+eAaUbRvrQUObmRAcR
+YzW
FIdBlNUCdoDaMLa4OipAHcjBiglNJMzuIqP6yA9LfFl/vL1kM0bTvBK32Uc+
G/NB
E6W72sg6oao=
=9iJj
-----END PGP SIGNATURE-----

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Oh, Sorry.

It's an NGX R61, without HFA. This was a plain new install,
where i had 
restored my system via a backup, and the firewall stuff via 
upgrade-export/upgrade-import.

Alvaro Gastambide schrieb:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
> 
> Hi, what is your Firewall version ?
> 
> did you upgrade this firewall from an early version ?
> 
> Saludos,
> 
> Alvaro Gastambide Lusiardo
> Check Point Certified Security Administrator - MCSA
> Dpto. de Ingenier�a
> Security Advisor
> www.sadvisor.com
> 
> 
> 
> Markus Schmidt wrote:
> 
>> Hi there,
>>
>> for evaluation purposes, I've activated the Anti
Virus Function on my 
>> gateway, to have Content Inspection fpr ftp, http,
pop3 and smtp.
>> I changed nothing, so all values have their default
value, but I 
>> updated the Signatures.
>> My Problem: with Content Inspection activated for
smtp and ftp, these 
>> services aren't working anymore.
>> telnet mymailserver 25 results in a connection
refused, shame thing on 
>> establishing an ftp connection.
>> Do I have to change something in my policy, or
somewhere else? Please 
>> help.
> 
> 
> -----BEGIN PGP SIGNATURE-----
> Version: PGP Desktop 9.0.0 (Build 2001)
> 
>
iQCVAwUBRWsHVJ6OVk3MzmvhAQjUSAP+Mx7/vUpg7gcgFr6xrOkyNpHjLVeN
GH6x
>
aWKlu/YRWpdBDfIFgT9sZ93r9rYJdPSJKrYbPOelwn+eAaUbRvrQUObmRAcR
+YzW
>
FIdBlNUCdoDaMLa4OipAHcjBiglNJMzuIqP6yA9LfFl/vL1kM0bTvBK32Uc+
G/NB
> E6W72sg6oao=
> =9iJj
> -----END PGP SIGNATURE-----
> 
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-ownerts.checkpoint.com
> =================================================

-- 
Markus Schmidt    	Tel.:   ++49-351-3 18 09 27
interface systems GmbH  Fax.:   ++49-351-3 36 11 87
Tolkewitzer Straße 49   E-Mail: Markus.Schmidtinterface-systems.de
D-01277 Dresden

Ein Unternehmen der interface:business-Gruppe

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Am Montag, 27. November 2006 15:59 schrieb Markus Schmidt:
> Oh, Sorry.
>
> It's an NGX R61, without HFA. This was a plain new
install, where i had
> restored my system via a backup, and the firewall stuff
via
> upgrade-export/upgrade-import.

Install hotfixes.

Michael Schwartzkopff

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Content inspection in R61 has it problem with upgrades, it
works fine in 
fresh installations.
I didn't try hotfix, may be the solution.

Saludos,

Alvaro Gastambide Lusiardo
Check Point Certified Security Administrator - MCSA
Dpto. de Ingeniería
Security Advisor
www.sadvisor.com



Markus Schmidt wrote:

> Oh, Sorry.
>
> It's an NGX R61, without HFA. This was a plain new
install, where i 
> had restored my system via a backup, and the firewall
stuff via 
> upgrade-export/upgrade-import.
>
> Alvaro Gastambide schrieb:
>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA256
>>
>> Hi, what is your Firewall version ?
>>
>> did you upgrade this firewall from an early version
?
>>
>> Saludos,
>>
>> Alvaro Gastambide Lusiardo
>> Check Point Certified Security Administrator - MCSA
>> Dpto. de Ingenier�a
>> Security Advisor
>> www.sadvisor.com
>>
>>
>>
>> Markus Schmidt wrote:
>>
>>> Hi there,
>>>
>>> for evaluation purposes, I've activated the
Anti Virus Function on 
>>> my gateway, to have Content Inspection fpr ftp,
http, pop3 and smtp.
>>> I changed nothing, so all values have their
default value, but I 
>>> updated the Signatures.
>>> My Problem: with Content Inspection activated
for smtp and ftp, 
>>> these services aren't working anymore.
>>> telnet mymailserver 25 results in a connection
refused, shame thing 
>>> on establishing an ftp connection.
>>> Do I have to change something in my policy, or
somewhere else? 
>>> Please help.
>>
>>
>>
>> -----BEGIN PGP SIGNATURE-----
>> Version: PGP Desktop 9.0.0 (Build 2001)
>>
>>
iQCVAwUBRWsHVJ6OVk3MzmvhAQjUSAP+Mx7/vUpg7gcgFr6xrOkyNpHjLVeN
GH6x
>>
aWKlu/YRWpdBDfIFgT9sZ93r9rYJdPSJKrYbPOelwn+eAaUbRvrQUObmRAcR
+YzW
>>
FIdBlNUCdoDaMLa4OipAHcjBiglNJMzuIqP6yA9LfFl/vL1kM0bTvBK32Uc+
G/NB
>> E6W72sg6oao=
>> =9iJj
>> -----END PGP SIGNATURE-----
>>
>> =================================================
>> To set vacation, Out-Of-Office, or away messages,
>> send an email to LISTSERVamadeus.us.checkpoint.com
>> in the BODY of the email add:
>> set fw-1-mailinglist nomail
>> =================================================
>> To unsubscribe from this mailing list,
>> please see the instructions at
>> http:
//www.checkpoint.com/services/mailing.html
>> =================================================
>> If you have any questions on how to change your
>> subscription options, email
>> fw-1-ownerts.checkpoint.com
>> =================================================
>
>

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.0.0 (Build 2001)

iQCVAwUBRWsUcp6OVk3MzmvhAQgwVgQAqUc40pR78FHIZMEOiFEqdTL0MyRE
pB+o
XnjimUh9PXs6M6SjHQUH7MCKWQYqwO88T1s3qAyJ9nVHqf7QiRPKGMaHIg3D
bnrL
/ysOvQk+K0rxFefVsRsKEjFDMHB7Reub9EWWrvha9NS6fNvYrewEQ7kT+teh
PMDP
nOGcdpQKZs4=
=hXpi
-----END PGP SIGNATURE-----

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

Well then, i'll try the hotfix, let's see if it works...

http://schmidt.bs-server
.com

Alvaro Gastambide schrieb:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
> 
> Content inspection in R61 has it problem with upgrades,
it works fine in 
> fresh installations.
> I didn't try hotfix, may be the solution.
> 
> Saludos,
> 
> Alvaro Gastambide Lusiardo
> Check Point Certified Security Administrator - MCSA
> Dpto. de Ingeniería
> Security Advisor
> www.sadvisor.com
> 
> 
> 
> Markus Schmidt wrote:
> 
>> Oh, Sorry.
>>
>> It's an NGX R61, without HFA. This was a plain new
install, where i 
>> had restored my system via a backup, and the
firewall stuff via 
>> upgrade-export/upgrade-import.
>>
>> Alvaro Gastambide schrieb:
>>
>>> -----BEGIN PGP SIGNED MESSAGE-----
>>> Hash: SHA256
>>>
>>> Hi, what is your Firewall version ?
>>>
>>> did you upgrade this firewall from an early
version ?
>>>
>>> Saludos,
>>>
>>> Alvaro Gastambide Lusiardo
>>> Check Point Certified Security Administrator -
MCSA
>>> Dpto. de Ingenier�a
>>> Security Advisor
>>> www.sadvisor.com
>>>
>>>
>>>
>>> Markus Schmidt wrote:
>>>
>>>> Hi there,
>>>>
>>>> for evaluation purposes, I've activated the
Anti Virus Function on 
>>>> my gateway, to have Content Inspection fpr
ftp, http, pop3 and smtp.
>>>> I changed nothing, so all values have their
default value, but I 
>>>> updated the Signatures.
>>>> My Problem: with Content Inspection
activated for smtp and ftp, 
>>>> these services aren't working anymore.
>>>> telnet mymailserver 25 results in a
connection refused, shame thing 
>>>> on establishing an ftp connection.
>>>> Do I have to change something in my policy,
or somewhere else? 
>>>> Please help.
>>>
>>>
>>> -----BEGIN PGP SIGNATURE-----
>>> Version: PGP Desktop 9.0.0 (Build 2001)
>>>
>>>
iQCVAwUBRWsHVJ6OVk3MzmvhAQjUSAP+Mx7/vUpg7gcgFr6xrOkyNpHjLVeN
GH6x
>>>
aWKlu/YRWpdBDfIFgT9sZ93r9rYJdPSJKrYbPOelwn+eAaUbRvrQUObmRAcR
+YzW
>>>
FIdBlNUCdoDaMLa4OipAHcjBiglNJMzuIqP6yA9LfFl/vL1kM0bTvBK32Uc+
G/NB
>>> E6W72sg6oao=
>>> =9iJj
>>> -----END PGP SIGNATURE-----
>>>
>>>
=================================================
>>> To set vacation, Out-Of-Office, or away
messages,
>>> send an email to LISTSERVamadeus.us.checkpoint.com
>>> in the BODY of the email add:
>>> set fw-1-mailinglist nomail
>>>
=================================================
>>> To unsubscribe from this mailing list,
>>> please see the instructions at
>>> http:
//www.checkpoint.com/services/mailing.html
>>>
=================================================
>>> If you have any questions on how to change your
>>> subscription options, email
>>> fw-1-ownerts.checkpoint.com
>>>
=================================================
>>
> 
> -----BEGIN PGP SIGNATURE-----
> Version: PGP Desktop 9.0.0 (Build 2001)
> 
>
iQCVAwUBRWsUcp6OVk3MzmvhAQgwVgQAqUc40pR78FHIZMEOiFEqdTL0MyRE
pB+o
>
XnjimUh9PXs6M6SjHQUH7MCKWQYqwO88T1s3qAyJ9nVHqf7QiRPKGMaHIg3D
bnrL
>
/ysOvQk+K0rxFefVsRsKEjFDMHB7Reub9EWWrvha9NS6fNvYrewEQ7kT+teh
PMDP
> nOGcdpQKZs4=
> =hXpi
> -----END PGP SIGNATURE-----
> 
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-ownerts.checkpoint.com
> =================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================